gothack06’s gists

gothack06 / root_bypass.js

Created August 30, 2020 05:52 — forked from pich4ya/root_bypass.js

Bypass Android Root Detection / Bypass RootBeer - August 2019

	// $ frida -l antiroot.js -U -f com.example.app --no-pause
	// CHANGELOG by Pichaya Morimoto ([email protected]):
	// - I added extra whitelisted items to deal with the latest versions
	// of RootBeer/Cordova iRoot as of August 6, 2019
	// - The original one just fucked up (kill itself) if Magisk is installed lol
	// Credit & Originally written by: https://codeshare.frida.re/@dzonerzy/fridantiroot/
	// If this isn't working in the future, check console logs, rootbeer src, or libtool-checker.so
	Java.perform(function() {

	var RootPackages = ["com.noshufou.android.su", "com.noshufou.android.su.elite", "eu.chainfire.supersu",

gothack06 / extensions_temp_backup.txt

Created June 15, 2020 03:33 — forked from hackerscrolls/extensions_temp_backup.txt

Common temp and backup extensions for files and directories by twitter.com/hackerscrolls

gothack06 / ejs.sh

Created April 23, 2020 18:45 — forked from gwen001/ejs.sh

onliner to extract endpoints from JS files of a given host

	curl -L -k -s https://www.example.com \| tac \| sed "s#\\\/#\/#g" \| egrep -o "src['\"]?\s[=:]\s['\"]?[^'\"]+.js[^'\"> ]" \| awk -F '//' '{if(length($2))print "https://"$2}' \| sort -fu \| xargs -I '%' sh -c "curl -k -s \"%\" \| sed \"s/[;}\)>]/\n/g\" \| grep -Po \"(['\\\"](https?:)?[/]{1,2}[^'\\\"> ]{5,})\|(\.(get\|post\|ajax\|load)\s\(\s*['\\\"](https?:)?[/]{1,2}[^'\\\"> ]{5,})\"" \| awk -F "['\"]" '{print $2}' \| sort -fu

	# debug mode and absolute/relative urls support (the best one):
	function ejs() {
	URL=$1;
	curl -Lks $URL \| tac \| sed "s#\\\/#\/#g" \| egrep -o "src['\"]?\s[=:]\s['\"]?[^'\"]+.js[^'\"> ]" \| sed -r "s/^src['\"]?[=:]['\"]//g" \| awk -v url=$URL '{if(length($1)) if($1 ~/^http/) print $1; else if($1 ~/^\/\//) print "https:"$1; else print url"/"$1}' \| sort -fu \| xargs -I '%' sh -c "echo \"'##### %\";curl -k -s \"%\" \| sed \"s/[;}\)>]/\n/g\" \| grep -Po \"('#####.)\|(['\\\"](https?:)?[/]{1,2}[^'\\\"> ]{5,})\|(\.(get\|post\|ajax\|load)\s\(\s['\\\"](https?:)?[/]{1,2}[^'\\\"> ]{5,})\" \| sort -fu" \| tr -d

gothack06 / nmap-tcp-full.sh

Created January 11, 2020 06:01 — forked from coffeegist/nmap-tcp-full.sh

OSCP nmap scripts

	if [ "$#" -ne 3 ]; then
	echo "Usage: nmap-tcp-full.sh <TCP-QUICK-RESULTS.XML> <TARGET> <OUTPUT-FILENAME>"
	exit 1
	fi

	nmap -nvv -Pn -sSV -T1 -p$(cat $1 \| grep portid \| grep protocol=\"tcp\" \| cut -d'"' -f4 \| paste -sd "," -) --version-intensity 9 -A -oA $3 $2